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Abstract. Mixing induction and coinduction, we study alternative definitions of streams 
being finitely red. We organize our definitions into a hierarchy including also some well- 
known alternatives in intuitionistic analysis. The hierarchy collapses classically, but is 
intuitionistically of strictly decreasing strength. We characterize the differences in strength 
in a precise way by weak instances of the Law of Excluded Middle. 



1. Introduction 

Finiteness is a concept that seems as intuitive as it is fundamental in all of mathematics. 
At the same time finiteness is notoriously difficult to capture axiomatically. First, due to 
compactness, finiteness is not first-order definable. Second, in ZF set theory, there exist 
several different approximations (as ZF is a first-order theory). Tarski's treatise [I] is still 
a very readable introduction to different definitions of finiteness in set theory without the 
axioms of infinity and choice. These include the definitions by Dedekind (S is finite if 
there is no bijection from S to a proper subset of S), Kuratowski (S is finite if S can be 
obtained from the empty set by adding elements inductively), and Tarski (S is finite if 
each non-empty set of subsets of S contains a minimal element wrt. set inclusion). Some 
approximations of finiteness are only equivalent if one assumes additional axioms. And all 
this already in the realm of classical mathematics. 

It will therefore not come as a surprise that in intuitionistic mathematics the situation is 
even more complicated. In this paper, we will study several classically equivalent definitions 
of bit-valued functions (binary infinite sequences) that are almost always zero, that is, there 
are at most finitely many positions where the sequence is one. From the constructive point 
of view, one has at least the following main variants. 

(1) 3n. Mm > n. f m = 0. This definition expresses that all finitely many m for which 
/ m = 1 occur in / before some position n. By the decidability of =, they can all be 
looked up and counted. This is clearly the strongest definition giving all information. By 
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the decidability of =, this definition is also intuitionistically equivalent to 3n. -i-iVm > 
n. f m = 0, in spite of the double negation prefixing the universal quantifier. 

(2) 3n. Vm. #{A: < m \ f k = 1} < n. This definition is weaker than the first one. It only 
states that there is an upper bound to the number of ones in the sequence, but does 
not provide information on where to find them. 

(3) -i(Vn. -i-i3m > n. f m = 1). This definition is equivalent to Note that (3) is 
stable since it is negative, and therefore does not imply (2). Surprisingly, (3) is also 
equivalent to — > — i (2) . The reason is that (1) and (2) are classically equivalent, do not 
contain disjunction, and have only existential quantification as the main connective of 
the formula. Therefore their respective double negation translations and _,_i (2) 
are constructively equivalent, so also equally weak. 

(4) -i(Vn.3m > n. f m = 1). This definition expresses that the set of positions where the 
sequence is one is not infinite. It does not give a clue where to find the ones or how 
many ones there are. Definition (4) is the weakest of all: It negates a strong, positive 
statement allowing the construction of an infinite subsequence of ones in /. 

The variants are listed in decreasing constructive strength. Variants (1) and (2) are positive 
and therefore strictly stronger than the negative variants (3) and (4). Reversing the impli- 
cations above requires some form of classical logic. For instance we know that (4) ==> (2) 
is not constructively valid. We use the occasion to introduce an argument employed more 
rigorously later in this paper. Let / be an arbitrary bit-valued function. Construct /' 
starting from n = by taking /' n = as long as / n = 0. There is no constructive way to 
find out whether / n is always or not, but if / n = 1 for the first time, we take f k = 1 
for n < k < 2n and f k = for k > 2n. One easily verifies (4) for /'. Now, if (2) would 
hold for /' we would be able to decide whether / is constant or not. For if there are at 
most n ones occurring in /', the first one would occur not later than at n, and this can 
constructively be tested. In other words, (4) ==> (2) implies an instance of the excluded 
middle which is not constructively valid. 

The paper sets out an expedition to the concept of finiteness from the constructive 
point of view, with strong assumptions on the set whose finiteness we study. Namely, 

(1) The set is enclosed in another set with decidable equality. 

(2) It is carved out by a decidable predicate (whether a bit-valued function returns 1). 

(3) The enclosing set can be enumerated. 

In one word, therefore, we could summarize our setting as "searchable" . As we will see in 
the paper, even in a searchable setting, there are at least six different notions of "finiteness" . 

The remainder of the paper is structured as follows. In the next section, we set up a 
basis for our development in the paper. Section [3] introduces a spectrum of definitions for 
sequences being finitely one. In Section HI we study relative strength of these definitions 
from the constructive point of view. In Section [5j we relate our analysis to that of finiteness 
of sets in Bishop's set theory due to Coquand and Spiwack We conclude in Section [6l 

For methodological uniformity, we prefer to define all datatypes inductively (rules de- 
noted by a single line) or coinductively (rules denoted by a double line). 



We may look at binary infinite sequences in two ways. We may view them as bit-valued 
functions on natural numbers or, which will amount to the same, as streams of bits, i.e., 
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as elements of a coinductive type. Correspondingly, we will use two different languages 
to speak about them: arithmetic (as is traditional in logic) for bit-valued functions and 
the language of inductive and coinductive predicates (as is more customary in functional, 
in particular, dependently typed, programming) for bitstreams. As a warming-up, in this 
section, we connect the two views, setting up a basis for our development along the way. 
For this paper to have some color, we take a bit to be one of the two colors, red and 

blue: 

R : color B : color 

In the function- view, an infinite sequence is therefore a function / : not — > color mapping 
natural numbers (positions in the sequence) to colors. Our intended notion of equality of 
these functions is the extensional function equality defined by 

Vn. f n = f n 

In the stream-view, an infinite sequence is a stream s : str where the stream type is defined 
coinductively by the following rule: 

c : color s : str 
c s : str 

Two streams s and s' are equal for us, if they are bisimilar. This notion of equality is 
defined coinductively by the rule 

s ~ s' 
c s ~ c s' 

The two types are isomorphic. Indeed we can define two functions s2f : str — > not — >• color 
and f2s : (nat — > color) — > str mediating between the two types. The function s2f is defined 
by (structural) recursion by 

s2f (cs)0 = c 

s2f (c s) (n + 1) = s2f s n 

while the function f2s is defined by (guarded-by-constructors) corecursion by 

f2sf = (f0) (f2s(Xn.f(n + l))) 

We have that V/, s. f = s2fs f2s f ~ s. The =^ direction is proved by coinduction, the 
•<= direction by induction. From this fact it follows immediately that V/. / = s2f (f2s f) 
and \/s.f2s{s2f s) ~ s, i.e., that the function and stream types are isomorphic, as well 
as that VfJ'.f = f => f2sf ~ f2s f and Vs,s'.s ~ s' f2s s = f2ss', i.e., that the 
conversion functions appropriately preserve equality. (In general, we have to ensure that 
all functions and predicates we define on bit-valued functions and bitstreams respect our 
notions of equality for them, i.e., extensional function equality and bisimilarityQ) 

Properties of binary infinite sequences can now be defined and analyzed in either one of 
the two equivalent views. For the stream-view, it is convenient to introduce some operations 
and predicates as primitives in our language for streams. We define 

(c s )@0 = c (c s)@(n + 1) = s@n 

s\ = S (c s)|( n+ l) = s\ n 



^The correspondence between extensional function equality and bisimilarity shows that bisimilarity is the 
one and only reasonable notion of "extensional stream equality". 
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so that s@n denotes the color at the position n in s and s\ n denotes the suffix of s at n. 

We also define 

red (R s) blue (B s) 

Xs TXs X ( cs ) $ Xs 



FXs TX{cs) gX{cs) 
Here, T and Q are the "sometime in the future" ("finally") and "always in the future" 
("globally") modalities of linear-time temporal logic. They are stream predicates parame- 
terized over stream predicates H Induction and coinduction give us simple proofs of basic 
facts such as the equivalence 

Vs. G{\t.^Xt)s ^ nJIs 
and the implication (converse does not hold) 

Vs. F{\t.^Xt)s => -^gxs 

Importantly, we can also prove that 

Vs. TXs & 3n.X{s\ n ) 
Vs. GXs O Vn.X{s\ n ) 

noticing that Vs, n. s2f (s\ n ) = Am. s2f s (n + m). 

Both modalities are expressible in the function- view, but the definitions are (perhaps) 
less elegant, as they involve explicit arithmetical manipulation of positions: 

V/. F(\s.Y(s2f s))(f2sf) O 3n.Y(Xm. f (n + m)) 
V/. G(\s.Y(s2f s))(f2s f) & Vn.y (Am. f (n + m)) 

In particular, 

Vs. T red s <^ 3n.s2fsn = R 
Vs. Q blues <^ \ln.s2fsn = B 

Accordingly, we have 

Vs. (-it/ blue s T red s) <4> (-i(Vn. s2f sn = B) 3n. s2f sn = R) 
and hence 

[Vs. blue s^Treds] ^ [V/. -.(Vn. / n = B) => 3n. fn = R)] 

We now have arrived at two equivalent formulations of Markov's Principle (MP). Markov's 
Principle is an important principle that is neither valid nor inconsistent constructively, but 
only classically valid. It is computationally meaningful, however, being realizable by search. 

In the function-view (the right-hand side), which is how it is traditionally presented, 
Markov's Principle is the statement that 

V/. -.(Vn./n = £) 3n. f n = R 

(or, equivalently, as Vn. —*A <^ -dn. A, the statement V/. m(3n. / n = R) => 3n. f n = R.) 

The computational interpretation is the natural one: if it cannot be that all positions 
in a given infinite sequence are blue, then we find a red position by exhaustively checking 
all positions in the natural order 0, 1, 2 . . .. (Cf. computability theory: this is minimization, 
not primitive recursion.) 



2 There is no need to see them as "first-class" predicate transformers, as there is no real impredicativity 
involved: the argument X in the definition of T and of Q is constant. 
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In the stream- view (the left-hand side), Markov's Principle is 

Vs. ->G blue s =^ T red s 

stating that if a stream s is not all blue, then it is eventually red. But, in a certain sense, 
it is more than just any equivalent statement to the function-view counterpart. It is a 
concise formulation of Markov's Principle based on the stream view of infinite sequences 
and canonical inductive and coinductive predicates on streams. We would therefore like 
to think that, for computer scientists, it should be natural to take namely this statement 
rather than the traditional arithmetical version as the definition of Markov's Principle. 

This applies to another important classical axiom of the Lesser Principle of Omniscience 
which is meaningful as a special case of the Law of Excluded Middle. 

The Lesser Principle of Omniscience (LPO) is the assertion of the statement 

V/. (Vn.fn = B)V(3n.fn = R) 
that, in the light of what we already learned, is equivalent to 

Vs. Q blue s V J- red s 

Again, the latter statement is perhaps more basic for a computer scientist than the for- 
mer: it states that any stream is either all blue or eventually red (which is constructively 
impossible). 

As we have constructively A V B =4> {~^A =^ B), LPO implies Markov. LPO is not 
computationally justified, and therefore strictly stronger than MP. 

3. Some notions of "finitely red" 

With these preparations done, we can now proceed to possible mathematizations of the 
informal property of a given infinite sequence (function / or stream s) being "finitely red" . 
We consider six variations. They are all equivalent classically. In Section HI we will study 
their relative strength from the constructive point of view. 

3.1. Eventually all blue. The simplest mathematization is: "from some position on, the 
sequence is all blue" . 

In the function view, this is stated as 

Bn.Vm > n.f m = B 

while the stream-view statement is at least as simple, namely, the stream is "finally" "glob- 
ally" blue: 

T (Q blue) s 

The two statements are equivalent. 

Vs. F (Q blue) s 44> 3n. Vm > n. s2f sm = B 
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3.2. Boundedly red. This is: "the number of red positions in the sequence is bounded". 
In the function view, this is stated as 

3n. Mm. #{k < m \ f k = R} < n 

so that for a fixed n, / is red fewer than n up to the m-th position for any m. 

The formation of the stream view is similar. We first define a binary predicate le n s, 
which states that s is fewer than n red, coinductively by 

fe w +i s le n s 

le n+ i (B s) le n+ i (R s) 

Note that there are no clauses for Zeo, reflecting the fact that this unary predicate is every- 
where false. Then the stream-view is simply: 

3n. le n s 

Again, the two statements are equivalent 

Ms, n. le n s 44> Mm. #{k < m \ s2f sk = R} < n 

3.3. Almost always blue. The third definition amounts to the least fixed point of a weak 
until operator in linear-time temporal logic. It is also found in the thesis of C. Raffalli [5]. 
We formulate it in the stream view. The weak until operator, Wx, is parameterized over 
any predicate X on streams and defined coinductively by 

W x s Xs 
W x (B s) W x (R s) 

so that Wx s holds if, whenever the first occurrence of red in s is encountered, X holds 
on the suffix after the occurrence. Classically it is equivalent to that s is either all blue 
or it is eventually red and X holds on the suffix after the first occurrence of red (which is 
guaranteed to exist as s is eventually red). Our definition of Wx avoids upfront decisions 
of LPO, i.e., whether a stream is all blue or eventually red. 

We then take the least fixed point of Wx ■ Define fj,W inductively in terms of Wx by 
the (Park-style) rule: 

Wf+ws 
HW s 

As Wx is monotone on X, the above definition makes sense. For the purpose of proof, in 
particular to avoid explicitly invoking monotonicity of the underlying predicate transformer 
Wx, it is however convenient to use the Mendler-style rule 

Vs. X s =>• fiW s Wxs 
fiW s 

The Park-style rule is derivable from the Mendler-style rule. As Wx is monotone on X, we 
can also recover the natural inversion principle for fiW. 

The statement ^W s does not give a clue as to where to find the red positions in s or 
how many of them there are. Nonetheless it refutes that the stream is infinitely often red 
(to be formulated below). Therefore [iW s expresses that s is almost always blue, and in 
the remainder of the paper we phrase fiW as almost always blue. 

The function view corresponding to fiW could be given by the second-order encoding of 
induction and coinduction, which is inevitably more verbose and therefore omitted. Instead, 
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in the following subsections, we will take a closer look at Wx and /iW, giving alternative 
characterizations of streams that are almost always blue. 

3.4. Streamless red positions. The fourth definition is inspired by [2]. It states that the 
set of red positions in the sequence is streamless. A set A is streamless if every stream over 
A has a duplicate. As equality on A is decidable for us, this is equivalent to saying that a 
set A is streamless if any duplicate-free colist over A is finite. 

For any set A, we define duplicate-free colists over A coinductively by 

x : A £: colist (A \ {x}) 

() : colist A x £ : colist A 

We define finiteness of colists inductively by 

£j 

(}| x £1 

For any sequence, namely function / or stream s, let TZf (resp. TZ S ) denote the set of red 
positions in / (resp. s). Formally, n € TZf (resp. n G TZ S ) if f n = R (resp. s@n = R). 

Then, the fourth definition of streams being finitely red is stated in the stream view as 

W : colist TZ S . i j 

or, trivially equivalently in the function view, as 

W : colistTZf.il 

Finite subsets of a given set S can be characterized using not as for every injection 
i : not — > S and every finite subset A C S there exists n : nat with in ^ A. This naturally 
leads to a positive formulation of co-finiteness: A C S is co-finite if for every injection 
i : nat —> S there exists n : not with in € A. In [7], Wim Veldman coined the qualifier 
almost full for a subset A of nat such that for every strictly increasing i : nat — > nat one 
has in £ A for some n : nat. Let B s denote the set of blue positions in s. It turns out that 
the notions almost full and streamless are related in the following precise sense. 

Lemma 3.1. Vs. B s is almost full 4=^ W : colist TZ S . I \. 

Proof. (=>): Let s be such that B s is almost full and let i : colist TZ S . We have to prove £ J,. 
Define a function / : nat — > colist TZ S — > colist TZ S by corecursion by 

fn(} = {) 

f n (to £) = to (/ (to + 1) if n < m 
f n (to £) = f n£ if ra > to 

/ is well-defined as the last clause is successively applicable only finitely many times. More- 
over, / n £ is finite precisely when £ is. Clearly, / £ is increasing, and can be turned into an 
increasing function i = g (/ £) : nat — > nat by defining g : nat — > colist TZ S — > nat — > nat 
recursively by 

gm () n = n + m g m (x £) = x g to (x £) (n + 1) = g (x + 1) £ n 

One proves by induction on n that Vn, to, : nat. W : cofo£ TZ s .g m£n E £? s =^ £ J,. Since <S S is 
almost full there exist n : nat such that in = g (f £) n G £? s , so / £ so £ J, as required. 
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(<=)■ Let s be such that W : colist TZ S .£ |. We have to prove that B s is almost full. Let 
i : not — > not be increasing. We define corecursively h i : nab — > colist 1Z S by: 

hin = () if i n £ B s 

hin = (in) (hi (n + 1)) if i n G 7£ s 

One proves by induction on hin J, that Vn : not. hin \. => 3/c : nat.ik € Indeed we 
have ZiiO : colist H s , so ZiiO |. It follows that £> s is almost full. □ 

3.5. Not not eventually all blue. In this paper, we are mainly interested in positive 
variations. However, two negative variations appear natural to consider for us. One of 
them is the double negation of the first definition of eventually all blue. 

Our fifth definition is stated in the function view as, 

-i-i3n.Vm > n.fm = B 

or in the stream view as 

^^J 7 (G blue) s 

which is equivalent to 

-<G (-'G blue) s 

The last formulation, —>G (~^G blue) s, turns out handy in proofs and we will use either of 
them interchangeably. 

3.6. Not infinitely often red. The last definition of streams being finitely red is given 
by streams not being infinitely often red. So we first look at definitions of streams being 
infinitely often red, which admit less variety of definitions. 

A well-known definition is given by streams that are "globally" "finally" red, or 

G (J 7 red) s 

This definition is dual to that of eventually-all-blue streams, i.e., T (G blue) s. The modali- 
ties G and J- are flipped, so are the colors red and blue. The function view of this is stated 
as 

Vn. 3m > n. f m = R 
The function and stream views are equivalent 

Vs. G (J 7 red) s <^ Vn. 3m > n. s2f sm = R 

Similarly, we obtain a definition of streams being infinitely often red, by dualizing the 
definitions of Wx and fiW, yielding 

U x s X s U vU s 

U X (B s) U X (R s) vU s 

The (strong) until operator Ux is dual to the weak until operator Wx- The statement Ux s 
says that the suffix of s after the first occurrence of red must satisfy X and the occurrence 
must exist. Then vU takes the greatest fixed point of Ux, whereas uW is the least fixed 
point of Wx- 

Interestingly, vU is equivalent to G (J~ red) 

Vs. vU s 44> G (T red) s 
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As we will see in SectionHJ fj,W and T (Q blue) are not equivalent constructively. (Collapsing 
the two amounts to LPO.) 

We conclude this section with the weakest definition in our spectrum of streams being 
finitely red. Namely, 

->Q (T red) s 

or in its equivalent function view 

-•(Vn. 3m > n. f m = R) 

3.7. Accessibility. In this section, we characterize streams that are almost always blue in 
terms of accessibility of (decidable) relations on natural numbers induced by streams. 
We define accessibility of a binary relation y on a set U by 

Vm. ny m => accy m 
accy. n 

For any stream s, we define a decidable relation y s on natural numbers by taking 
n y s m to mean that m is the position following the first red position from n onward 
(including n). Formally, 

n<t Vfc. n < k < £ ^ s@k = B s@£ = R I + 1 = m 

n y s m 

An equivalent inductive definition is: 

y s m n y s m 

yR s 1 0^_B s m + l n + ly cs m + l 

The intuition is that n >- s m should hold if and only if, whenever Wx s\ n is true, then this 
is justified by X s\ m . (This means that y s is deterministic, but not functional.) This is 
what the next lemma proves. 

Lemma 3.2. Vs, n. Wx s\ n 4=> (Vm. n y s m => X s\ m ) 

Proof. (=^): We prove Vs,n,m.n y s m =>■ Wx^ln X s\ m by induction on the proof of 
n y s m. 

The case of s = R s', n = and m = 1: From the assumption Wx s\q, i.e., Wx s, we 
directly learn that Is', i.e., X s\i. 

The case of s = B s' , n = and m = m' + 1 and y s i vn!: The assumption Wx s|o, i-e., 
Wx s, assures us that Wx s', and by the induction hypothesis we have Wx s'|o X s'\ m i. 
Hence Xs'\ m >, i.e., X s\ m . 

The case of s = c s', n = n' + 1 and m = m' + 1 and n' >~ s i vn!: The assumption Wx s\ n 
amounts to Wx s'\ n /. By the induction hypothesis, Wx s'\ n > X s'\ m i , we get that X s'\ m i, 
i.e., X s\ m . 

(<=): We prove Vs, n. (Vm. n)- s m X s\ m ) =^ Wx s| n by induction on n. In the base 
case n = of the induction, we perform coinduction. 

The case of n = and s = R s': we know that ^ s 1. Hence the assumption 
Vm. y s m =>• Xs| m gives us that Xs|i, i.e., Is', from where it follows that Wx s, i.e., 
W x s\ . 

The case of n = and s = B s': We know that, if >~ s m for any m, then m = vn! + 1 
for some m' and >- s ' m'. Hence the assumption Vm. ^ s m Xs| m gives us that 
Vm'. >- s / vn! Xs'\ m /. By the coinduction hypothesis, it follows that Wx s'\o, i-e., 
Wx s', from where we learn Wx s, i.e., Wx s|o- 
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The case of n = n'+l and s = c s': We observe that n>- s m\f n' y s > m 1 and m = m'+l. 
Therefore the assumption Vm. n y s m X s\ m gives us that Vm'. n' y s i m' =4> X s'\ m i. By 
the induction hypothesis, we get that Wx s'\ n > which is the same as Wx s\n- D 

It is noteworthy that this lemma, instantiated at n = 0, gives us a possible arithmetical 
definition of the weak until operator Wx that avoids impredicativity (quantification over 
predicates). Indeed, it suggests that we could have defined: 

W x a <f> W. (VA; < L s@k = B) A s@£ = R => X s\ i+1 

To compare, the impredicative definition is: 

W x s 3Y. (Vs' . Y (R s') =>Is') A (Vs'. Y (B s') =^ Y s') AY s 

Further, we have that, for any stream s, s is almost always blue, fiW s, if and only if 
is accessible with respect to y s . The claim follows from the following lemma. 

Lemma 3.3. Vs,n./iW s\ n <=S> acc >s n. 

Proof. (=>): We prove Vs,n.fiW s\ n acc >s n by induction on the proof of fiW s\ n E 
From this proof, we have that, for some stream predicate X, Vs'. Is'^> fiW s' and W^ln- 
By the induction hypothesis, the former gives us Vm. X s\ m => accy s m while, by the 
previous lemma, the latter gives Vm.n y s m X s\ m . Putting the two together, we get 
Vm. n y s m =^ accy a m, hence acc^ g n. 

(<^=): By induction on the proof of accy 3 n. We have Vm.n y s m^> acc yg m and by 
the induction hypothesis, Vm.n y s m =4> fiW s\ m . The previous lemma therefore gives us 
W M w s| n , hence fj,W s\ n , as required. □ 

Corollary 3.1. Vs./iW s acc >s 0. 

We can in fact rephrase the variant from Section 13.41 (streams for which the sets of red 
positions are streamless) and the variant from Section 13.61 (streams that are not infinitely 
often red) in terms of y s , as we will do now. 

3.7.1. Strong normalization. Streams whose red positions form streamless sets correspond 
to streams s for which y s is strongly normalizing at 0. 

For any set U and any relation y on U, we define (descending) chains in y coinductively 

by 

xq :U xq y x\ I : chain^. x\ 
() : chain^. xq x\ I : chain^ xq 
so that xiX2-..x n () : chain^XQ means that xq y x\ y X2 y ■ ■ ■ y x n . Note that a chain in 
y may be infinite. 

We define finiteness of chains inductively by 

()| x 1 1 

We use the same notation for finiteness of colists and chains. 

A binary relation y on a set U is strongly normalizing at x : U, SN y x, if any ^-chain 
starting at x is finite, or W : chainy x. £ X- 

For any stream s, y s is strongly normalizing at if and only if 1Z S is streamless. 

^To be fully precise, we prove Vs'./xW s' => (Vs, n. s' = s\ n => acc^ s n) by induction on the proof of 
(j,W s'. In further proofs we will use these generalizations of coinduction and induction without comments. 
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Lemma 3.4. Vs. SN y s <4> 1Z S is streamless. 

Proof. (=>): We first notice that SN y s if and only if SN yf 0, where yf is the transitive 
closure of y s . Define a function / : nat — > colist nat — > colist nat by recursion by 

fn() = {) 

f n (m £) = m £ if n < m 
f n (m £) = / n£ if n > m 

The computation of fn£ is terminating as £ is duplicate-free. (So, fn£ is welldefined.) 
Moreover, define a function g : colist nat — > colist nat by corecursion by 

<7<) = <) g(n£) = (n + l) (g(fn£)) 

We have that, for any duplicate-free colist I over 1Z S , t is finite if and only if g I is finite, 
and moreover gi is a chain in starting at 0. 

Now, for any given duplicate-free colist £ : colist 1Z S , by our assumption, gl is finite, 
which implies I is finite, as required. 

(•<=): Define a function / : colist (nat \ {0}) — > colist nat by corecursion by 

/() = () f(n£) = (n-l) [ft) 

so that f £ shifts the elements in £ by subtracting one. 

For any given £ : chainy s 0, f £ is a duplicate- free colist over 7Z S , therefore f £ is finite 
by our assumption. By construction of /, £ is finite, which completes the proof. 

3.7.2. Antifoundedness. Streams that are infinitely often red correspond to streams s for 
which y s is antifounded. 

We define antifoundedness of binary relation >- on a set U coinductively by 

n>~ m div^ m 

divy. n 

so that divy n means that there is an infinite descending chain in y starting from n. 

Firstly we rephrase the strong until operator, Ux, which, unlike the weak until operator 
Wx, requires X to hold at some point. 

Lemma 3.5. Vs, n.Ux s\ n <^ (3m. n y s m A X s\ m ). 

Proof. (=^): By induction on n and in the base case n = also further induction on the 
proof of Ux s. 

The case of n = and s = R s': We have that -< s 1 and X s' and can choose m = 1. 

The case of n = and s = B s': We have that Ux s'. The inner induction hypothesis 
gives us that there is an m! such that y s i m! A X s'\ m i. But then we also have that 
y s m! + 1 A X s| m ' + i, so the desired result is witnessed by m = m! + 1. 

The case of n = n' + 1 and s = c s': The assumption Ux s\ n amounts to Ux s'\ n i. By 
the outer induction hypothesis, there is an m' such that n' y s m! A X s'\ rn i. But then also 
ny s m' + \/\X s| m / +1 , so we can choose m = m' + 1. 

(<=): We prove Vs,n,m. n y s mf\X s\ m Ux s\ n by induction on the proof of n y s m. 

The case of s = R s', n = and m = 1: The assumption X s|i, i.e., X s', implies Ux s, 
i.e., U x s| . 
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The case oi s = B s' , n = 0, m = m' + 1 and y s > ml: The assumption X s\ m amounts 
to X s'\ m i. By the induction hypothesis, we have that Ux s'|o, from where Ux s|o follows in 
turn. 

The case of s = c s', n = n' + 1, m = m! + 1 and n' y s t m'\ The assumption X s\ m 
amounts to X s'\ m r. By the induction hypothesis, it holds that Ux s'\ n r, which is the same 
asUxs\ n . □ 

Then we have that, for any stream s, s is infinitely often red, vU s, if and only if is 
antifounded with respect to y s . The claim follows from the following lemma. 

Lemma 3.6. \/s,n.uU s\ n 44> divy g n. 

Proof. (=>): By coinduction. From the assumption uU s\ n , we have that, for some stream 
predicate X, Vs'. Is' 4 vU s' and Ux s\ n . The former and the coinduction hypothesis 
together give us that, VW. X s\ m i =>■ div^ g m! . From the latter and the previous lemma, 
it follows that there exists an m such that n>- s m and X s\ m . Hence div^ g m and we can 
also conclude that divy g n. 

(<=): By coinduction. From the assumption divy g n, we have that there exists some m 
such that n y s m and divy g m. By the coinduction hypothesis, we have vU s\ m . By the 
previous lemma it follows now that U v u s\ n whereby we also learn that vU s\ n . □ 

Corollary 3.2. Vs. vU s ^ div >g 0. 



3.8. Classical fixed point. It turns out that the weak until operator Wx reaches the 
fixed point by w-iteration only classically. In fact, we have a stronger result: closure at to 
is equivalent to LPO. Define: 

F n s 
F"s 

where -F = False and F n+1 = Wf™, so that F w is Wx iterated uj times. 

Lemma 3.7. (Vs. Wf- s F" s) <^> (Vs. T red s V Q blue s). 

Proof. (=>): Define / : nab — > str — > str and g : nat — > str by corecursion 

f n(B s) = B (f (n+1) s) f n (R s) = g n 

g(n+l) = R(gn) g = B°° 

where B°° denotes a stream of blue, defined by corecursion by B°° = B B°° . The compu- 
tation of / s looks for the first occurrence of red in s, while keeping track of the number 
of blue it has seen so far in the second argument. On encountering the first red (if exists), 
it invokes g, passing n as argument. The stream that g n produces is red up to the n-th 
position, followed by an all blue stream. The trick is to record the position of the first 
occurrence of red in s in terms of the number of red in / s. If s does not contain red, then 
/ s does not either. This way, if we know the bound on the number of red in / s, then 
we know the bound on the depth of the first occurrence of red in s. We prove Vn. F n+l (g n) 
by induction on n, then Vn, s.Wpw(/ n s) by coinduction. We deduce Vs.F w (/ s) by 
our assumption, therefore Vs. 3n. F n (/ s) by definition. For any s, given F n (/ s) for 
some n, however, it suffices to examine the initial (n + l)-segment of s to know whether s 
contains red or not, enabling us to decide whether T red s or Q blue s holds. 

(<=): For any given s, suppose Wj?" s. By our assumption, we have either Q blue s or 
J- reds. In the case of Q blues, we immediately have F 1 s, therefore F^ s. In the case of 
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J- reds, let n be the position of the first occurrence of red in s, which is guaranteed to 
exist by F reds. From Wf"> s, we deduce F u s| n +i, i.e., F m s| n +i for some m, which yields 
F m+1 s, therefore s as required. □ 

In fact, F n is equivalent to le n . Namely we have that, Vn, s.F n s le n s. It is an 
open question whether there is a constructive closure ordinal. 



4. Analysis of the spectrum 

In this section, we analyze our spectrum of streams being finitely red. We have presented 
six variants: 

(a) Eventually all blue 

(b) Boundedly red 

(c) Almost always blue 

(d) Streamless red positions 

(e) Double negation of eventually all blue 

(f) Negation of infinitely often red 

We have a clear view on relative strength between positive variations. For negative ones, 
open questions remain. The overall picture is given in Section [6l 

We start from downward implications. The six variations above are listed in decreasing 
order of constructive strength, except that we do not know whether (d) implies (e): we only 
know that (c) implies (d) and (e), both of which imply (f) (Lemmata 14.31 14~4| 14.51 and 14.6ft 
and that (e) =>■ (d) amounts to Markov's Principle (Lemma 14. lOft . 

If a stream is eventually all blue, then it is boundedly red. 
Lemma 4.1. \/s.F(Q blue) s => 3n. le n s. 

Proof. By induction on the proof of F (Q blue) s. □ 

If a stream is boundedly red, then it is almost always blue. 
Lemma 4.2. Vn, s. le n s =^ //W s. 

Proof. By induction on n. The case of n = is immediate. The case of n = n' + 1: We 
prove that, Vs. le n > + i s => W^w s by coinduction and case analysis on the head color of s. 
The case of s@0 = B follows from the coinduction hypothesis. The case of s@0 = R follows 
from the main induction hypothesis. □ 

If a stream is almost always blue, then the set of its red positions is streamless. 

Lemma 4.3. Vs. yuW s 1Z S is streamless. 



Proof. The claim follows from Corollary 13.11 and Lemma 13.41 since accessibility implies 
strong normalization. □ 
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If a stream s is almost always blue, then it is not the case that s is not eventually all 
blue. 

Lemma 4.4. Vs. fiW s ->Q {->Q blue) s. 

Proof. We prove a slightly stronger statement, Vs. (Vn. —>Q blue s\ n ) =>■ Vn. /iW s| n =>■ False, 
from which the claim follows. For a given s, we assume Vn. -i£/ 6/ues| n . We shall prove 
Vn. fj,W s\ n => Fa/se by induction on the proof of /iW s\ n . We are given as induction 
hypothesis that, Vn. X s\ n => False. We have to prove False, given s| n . From our 
assumption, however, it suffices to prove Q blue s\ n . We do so by proving Vn. VVxs| n => 
6/ties| n by coinduction using the main induction hypothesis. □ 

If the set of red positions of a stream s is streamless, then s is not infinitely often red. 

Lemma 4.5. \/s.lZ s is streamless =>■ -n/ZY s. 

Proof. The claim follows from Lemma 13.41 and Corollary 13.21 since strong normalization 
contradicts antifoundedness. □ 

If it is not the case that a stream s is not eventually all blue, then s is not infinitely 
often red. 

Lemma 4.6. Vs. —>Q (—>Q blue) s =>■ —>vlA s. 

Proof. Noticing Vs. ulA s 44> Q {T red) s, the claim follows by contraposition from a tautology 
Vs. Q (J 7 red) s =>■ Q (pQ blue) s. □ 



We now proceed to study strength of upward implications, which are technically more 
interesting than downward implications. We know that differences between the first three 
positive variants amount to LPO (Lemma 14.71 and 14. 8[) . Moreover, (e) ==> (d) amounts 
to Markov's Principle (Lemma I4.10p and (f) => (e) to an instance of Double Negation 
Shift for a E^-formula (Lemma 14. lip . As immediate corollaries from Section 13.71 we have 
that (d) ==>■ (c) is equivalent to that SN of y s at implies accessibility of with respect 
to y s (Corollary 14. lj) and that (f) =>■ (d) is equivalent to that non-antifoundedness of 
with respect to y s implies SN of y s at (Corollary 14. 3p . 

Lemma 4.7. (Vn, s. le n s => T (Q blue) s) <^ (Vs. T red s V Q blue s). 

Proof. (=>): Define / : str — > str by corecursion 

f(Bs) = B(fs) f(Rs) = R B°° 

so that / s contains (exactly) one red if and only if s contains at least one red. We have 
that, Vs. Ze2 (f s), proved by coinduction and case analysis on the head color of f s. By 
our assumption, we have that, "is.T{Q blue) (/ s). The proof of JF (Q blue) (/ s) tells us 
whether / s contains red or not, deciding whether s is eventually red, J- red s or all blue, 
Q blues, as required. 

(<=): We prove that, Vn, s. le n s => T (Q blue) s by induction on n, assuming Vs. T red sV 
Q blues. The case of n = is immediate. The case of n = n' + 1: Suppose le n i + \ s. By 
our assumption, we have either T red s or Q blue s. The latter case immediately yields 
F{Qblue)s. For the former case, we prove Ms. Freds — > le n > + i s — > T {Q blue) s by 
induction on T red s and case analysis on the head color of s, using the main induction 
hypothesis. □ 
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Lemma 4.8. (Vs. fiW s =^ 3n. le n s) 4=> (Vs. F red s V Q blue s). 

Proof. (=>): We prove Vs. /iW s =^ 3n. le n s by induction on the proof of /iW s, assuming 
Vs. F red s V Q blues. We have that, for some stream predicate X, Vs'.Xs' => uW s' 
and Vs'. X s' 3n. le n s' and W^s. We have to prove that there exists some n such 
that le n s. By our assumption, we have either Q blue s or J 7 red s. The former case follows 
immediate by coinduction by taking n = 1. The latter case is closed by the auxiliary lemma: 
Vs' . F red s' =4> Wx s' =^ 3n.le n s' proved by induction on the proof of Freds' and case 
analysis on the head color of s' . The case of s'@0 = B follows from the induction hypothesis. 
The case of s'@0 = R follows from the main induction hypothesis, Vs'. 3n. le n s'. 

(•<=): We prove that, Vs. Wf^ s => s, assuming Ms.nW s =>■ 3n. le n s, where i 7 ^ 
was defined in Section 13.81 Then the case follows from Lemma 13.71 Suppose Wf^s. By 
Lemma 14.21 and the monotonicity of Wx on X, we have W^yvs, which yields uW s by 
definition. From our assumption and the equivalence between F n and le n , we conclude 
F w s, as required. □ 

The following claim is a corollary from Corollary 13.11 and Lemma 13.41 

Corollary 4.1. (Vs. 1Z S is streamless => fiW s) ^ (Vs. SN y s acc >a 0) 

Lemma 4.9. (Vs. J 7 red s V Q blue s) =^ (Vs. 1Z S is streamless =^ //W s) 

Proof. Assume Vs. J 7 red sV Q blue s (LPO) and let s be given. Based on LPO we can build 
an increasing colist of all red positions in s. Recall that s\ n denotes the suffix of s at n. 
Define a function / : str — >• not — >• colistTZ s corecursively by (m will be justified below): 

f sn = () HQ blue s 

f sn = (n + m) (/ s| m +i (n + m + 1)) if F red s, where m is the first red position in s 

The computation of / essentially depends on LPO. Observe that, in the second clause, the 
first red position in s exists by Freds (cf. Vs. Freds <^ 3n.s2f sn = R in Section [2]). 
Clearly, / s0 is the colist of all red positions in s. If 1Z S is streamless, then / s0 is finite: 
/s0 I.. By induction on the proof of f sn \, one proves that / sn \. implies uW s. In the 
base case f sn = (), we have Q blues, and therefore W M vv s by coinduction. In the step 
case of f sn being a cons-colist, we have Freds. We prove W^yy s by coinduction again, 
this time using the induction hypothesis that f s\ m+ i (n + m + 1) \. implies n\V s| m +i. In 
both cases, we get that uW s by definition. □ 

Lemma 4.10. (Vs. ->Q (->G blue) s TZ S is streamless) (Vs. -i£? 5Zue s =>■ J 7 red s) 

Proof. (=>): Define a function / : sir — > sir by corecursion by 

f(Rs) = B°° f(Bs) = R(fs) 

so that / s is red until the first occurrence of red in s is encountered, from where / s becomes 
all blue. 

For any given s, we assume —>Q blues. We have to prove Freds. Firstly, we prove 
(^G blue) (/ s). It suffices to prove Vs. G {~>G blue) (/ s) => G blue s. We do so by coin- 
duction and case analysis on the head color of s. The case of s@0 = R: This is impossible 
as we then have G blue (/ s), contradicting the assumption G {pG blue) (/ s). The case of 
s@0 = B: From the assumption £ (->G blue) (/ s), it follows that, £/ (-■£/ &Zwe) By 
the coinduction hypothesis, we obtain G blues\i, hence G blues. 
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Applying our assumption, Vs. —>Q (->£? blue) s =>■ 7Z S is streamless, to —>Q {—>Q blue) (f s) 
yields that ^(/ s ) is strongly normalizing at by Lemma 13.41 Below we prove J- reds, 
assuming SN >-(/ s ) 0, which completes the proof. 

Define a function g : nat — > colist nat by recursion by 

gn = (n+ 1) (g (n + 1)) if (f s)@n = R 
gn = () if (fs)@n = B 

As g is a chain in ^(f s ) starting at 0, i.e., gO : chainy^ 0, by our assumption gO is finite. 
By construction of g, we have (/ s)@n = B, where n is the length of g 0. (As g is finite, its 
length is welldefined.) By construction of /, we now have s@n = R, which yields J- reds, 
as required. 

{<=): For any given s, we assume —>Q (—*Q blue) s . We have to prove, for any given 
£ : chainy s 0, £ is finite. 

Define a function / : colist nat — > str by corecursion by 

/0 = i?°° / (n £') = B (f £') 

By definition of /, we have that, W : chairiy a 0.G blue (f £') => Q(-^Qblue)s, proved 
by coinduction. Hence from the assumption —iQ (—>Q blue) s, we are entitled to conclude 
—>(Q blue) {ft}. By Markov's Principle it follows that, J- red {ft}. However this means that 
£ J,, which completes the proof. □ 

Lemma 4.11. (Vs. ->Q {T red) s => (-<g blue) s) ^ (Vs. Q {^F red) s {T red) s). 

Proof. For any given s, we have 

-.->£ (^-iJ 7 red) s <=> -i-i-i T {-^T red) s <=> -ij" {^T red) s O Q {^J 7 red) s 

Now the claim follows by taking contrapositions of the respective assumptions, noticing 
Vs. —>Q blue s <^ -i-i J- red s and the above equivalence. □ 

The corollary below follows from lemmata 14.51 14.101 and 14.111 
Corollary 4.2. (Vs. —*vlA s =>■ 1Z S is streamless) (Vs. —>Q blues => J- red s) 

The following claim is a corollary from Corollary 13.21 and Lemma 13.41 
Corollary 4.3. (Vs. -^vlA s =>- 1Z S is streamless) <^ (Vs. ~^divy s =4- V£ : chairiy s 0. £ |). 



5. Related work: finiteness of sets of red positions 

In [2], Coquand and Spiwack introduce four notions of finiteness of sets in Bishop's set 
theory [3]. For understanding some of their arguments, for example, on page 222, the 9-th 
line from below, we had to assume that equality is decidable. Under this assumption their 
results may be rendered as follows: 

(i) Set A is enumerated if it is given by a list. 

(ii) Set A is of bounded size if there exists a bound such that any list over A contains 
duplicates whenever its length exceeds the bound. 

(iii) Set A is Noetherian if the root of the tree of duplicate-free lists over A is accessible 
(cf. Section [377|) . 

(iv) Set A is streamless if every stream over A has a duplicate. 
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These four notions are classically equivalent but of decreasing constructive strength. Their 
hierarchy of finiteness matches pleasantly with our hierarchy of positive variations of streams 
being finitely red, if we look at sets of red positions in our streams. An important difference 
is that Coquand and Spiwack consider sets that may not be decidable, whereas we work with 
decidable sets of natural numbers. As a result, our hierarchy becomes tighter than theirs, 
allowing us to capture differences in strength of our hierarchy in terms of weak instances of 
the Law of Excluded Middle. 

In this section, we rephrase our hierarchy in terms of Coquand and Spiwack's. Their 
streamless sets directly correspond to our streams s for which the set of red positions, 7Z S , 
is streamless. We will therefore only consider (i) - (hi). Recall that in this paper we work 
with decidable sets of natural numbers. 

Enumerated sets. A set A is enumerated, enum A, if all its elements can be listed, or 

Vr : A. false x : A enum (A \ {x}) 
enum A enum A 

Note that a proof of enum A is essentially an exhaustive duplicate-free list of elements of 
A. 

It is easy to see that a stream s is eventually all blue if and only if the set of red 
positions in s is enumerated. 

Lemma 5.1. Vs. J- {Q blue) s -£4> enum 1Z S . 

Proof. (=>): Given T (Q blue) s, we can construct a list of the red positions in s, from which 
enum 1Z S follows. 

(<=): Given enum 1Z S , we know the position of the last occurrence of red in s, which 
yields T (Q blue) s. □ 

Size-bounded sets. A set A is of bounded size if there exists a natural number n such that 
any duplicate-free list over A is of length less than n. Specifically, we say A is size-bounded 
by n if any duplicate-free list over A is of length of less than n. Formally, 

Vx : A. bounded n {A \ {x}) 
bounded n +\ A 

Lemma 5.2. Vn, s. le n s 4=> bounded n 1Z S . 

Proof. For any decidable set A of natural numbers, we define a stream sa by 

s A @k = R if k G A 
SA@k = B otherwise 

so that sa is red exactly at the positions in A. 

(=>): By induction on n. The case of n = is immediate. The case of n = n' + 1: 
We are given as induction hypothesis that, Vs. le n i s => bounded n i 1Z S . We have to prove 
bounded n > + i 1Z S , given le n > + i s. Suppose x £ TZ S . It suffices to prove bounded n > 1Z S \ {x}. 
From le n / + i s, we deduce le n > s<n B \f x }- By induction hypothesis, we obtain bounded n / 1Z S \ 
{x}, as required. 

(<^=): We prove Vn, A bounded n A =^> le n sa by induction on n, from which the case 
follows. The case of n = is immediate. The case of n = n' + 1: We are given as induction 
hypothesis that, VA bounded n / A => le n > sa- We have to prove VA bounded n ' + i A => 
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ie n '+i sa- We do so by coinduction and case analysis on the head color of sa- The case 
of sa@0 = B: We have bounded n i + \ T^ SA u- We close the case by coinduction hypothesis. 
The case of sa@0 = R- We have bounded n i 7t SA \i- We c l° se the case by the main induction 
hypothesis. □ 



Noetherian sets. A set A is Noetherian, Noet A, if, for all x G A, A\{x} is Noetherian. 
Formally, 

Vx € A. Noet (A\{x}) 
Noet A 

Then, a stream s is almost always blue, /iW s, if and only if the set of red positions 
in s is Noetherian. To prove this, it is convenient to reformulate Noetherianness for sets of 
natural numbers by removing the elements up to n (including n): 

Vn G A. Noet' A\{0, ...,n} 

Noet 1 A 

The two definitions are equivalent. 
Lemma 5.3. VA Noet A <^ Noet' A. 

Proof. (=>): We prove that, VA Noet A =>• Vn G A. Noet' A\{0,...,n} by induction 
on the proof of iVoei A We are given as induction hypothesis that, Vn G AVm G 
A\{n}. AToei' ^4\{n}\{0, . . . , m}. We have to prove that, Vn G A AToei' A\{0, . . . , n}, which 
follows from the induction hypothesis and by case analysis on whether there is m < n such 
that m G A (Recall that ^4 is assumed decidable.) 

(<^=): We prove by induction on the proof of Noet' A. We are given as induction 
hypothesis that, Vn G A Noet ^4\{0, . . . , n}. We have to prove Vn G A iVoei A\{n}, which 
follows from an auxiliary lemma, Vn, A AToei A =>■ iVoet (A U {n}), proved by induction, fj 

Given a set ^4 of natural numbers, we define a relation on natural numbers such 
that n >~a m if m = £ + 1 with ^ being the least natural number such that n <£ and ^ G A 
Formally, 

n < £ Vfc.n < fc < I =>• A; A £ e A I + 1 = m 
n to 

Note that, for any stream s, ^ s is equivalent to >~r s by definition. So our task is to prove 
equivalence of A being Noetherian and accessibility of with respect to >-a- 

For a relation y over a set A, y* denotes the reflexive and transitive closure of y and 
y + denotes the transitive closure. 

Lemma 5.4. V^. (Vn. accy n) <4> (Vn. accy_+ n). 

Proof. (=>): We prove a slightly stronger statement, Vn. accy. n =>■ Vm. n y* m ^ accy+ m 
by induction on the proof of accy n, from which the claim follows. 

(<=): By induction on the proof of accy+ n. □ 
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Lemma 5.5. VA Noet' A ^ acc^ A 0. 

Proof. (=>): By induction on the proof of Noet' A. We are given as induction hypothesis 
that, Vn € A. accy A ^ n} 0. We have to prove Vn. >-a n =^ accy A n, which follows from 
the induction hypothesis and by observing that, VA, n. accy A ^ {0 n _ ± , =^ accy A n. 

(•<=): We prove that, \/A, n. acc^+ n Noet' A\{0, . . . , n — 1} by induction on the proof 
of acc, + n. Then the case follows from Lemma 15.41 We are given as induction hypothesis 

that, Vm. n y-\ m Noet' A\{0, . . . , m — 1}. We have to prove Noet' ^4\{0, . . . , n — 1}, 
which follows from the induction hypothesis and by case analysis on whether n 6 A or 
not. □ 

Combining lemmata 13.31 15.31 and 15.51 we obtain: 

Corollary 5.1. Vs./xW s Noet K s . 



6. Conclusion 

The following diagram summarizes our current understanding of the constructive interre- 
lations between the various notions of finiteness. Implications that are annotated have not 
been proved constructively; the annotations explain which principle is sufficient and, in 
some cases, necessary to prove the implication. 

T (G blue) s 

( )^ LPO 
3n. le n s 

{ )" LP ° 
/iW s 

4= BI V LPO 

(( SN y s 

<S> MP 

-> Q {-^Qblue) s 

<S= Sj-DNS 

(J 7 red) s 

We do not know whether the implication SN y s =^ —>G (~>G blue) s holds. As observed 
by Coquand and Spiwack in [2J Sec. 2.4, p. 225], the implication 'if A is streamless, then A 
is Noetherian' can be proved by Bar Induction (BI). The precise instance of Bar Induction 
that proves this implication depends on the set A. In our case here, the set A is decidable. 
Therefore our formulation of the implication, SN y s =^ /iW s, can be proved by a weak 
instance of Bar Induction (BI/), see [U Ch. 4, 8.11, p. 229]). We find it remarkable that both 
BI and LPO prove SN y s => /iW s, and do not know whether this implication can be 
proved constructively. Although we consider the latter unlikely, we prefer to consider it as 
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an open problem. Since 1Z S is decidable, constructivity of SN y s =>■ /iW s will be more 
difficult to disprove than the conjecture by Coquand and Spiwack [2j Sec. 2.4, p. 225]. 
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